Giving users access to DESelect Segment without certain access to Automation Studio – DESelect

DESelect Segment requires users to have certain Automation Studio permissions. However, it's possible to give your users these permissions without giving them certain access to the Automation Studio app in Marketing Cloud.

We suggest creating a role with the required permissions and assigning this role to the DESelect Segment users.

In this example, we will grant permission to a DESelect Segment user to access all Salesforce Marketing Cloud apps except for some restrictions on Automation Studio such as accessing SQL Query Activities and viewing automations but not be able to create, edit and delete.

Salesforce Marketing Cloud users have the ability to only view, but not be able to create, edit, or delete any automations. Hence, with this set of permissions, you can ensure that your existing automations will remain unchanged by the latter users. However, the users can still access Query Activities inside Automation Studio. Note that permissions to access queries are needed for DESelect Segment to function, as our solution still generates SQL queries in the backend.

1. Create Role:

In Salesforce Marketing Cloud, go to: Setup > Administration > Users > Roles
Click Create
Under Name, enter DESelect User with restrictions to Automation Studio
Assign the following permissions:
- Automation Studio:
  - Automation:
    - Create: deny
    - Create, Edit, Execute: deny
    - Delete, Execute: deny
    - Execute (API): allow
Email:
- - Subscribers:
    - Subscriber: allow all
    - Data Extension: allow all
    - Data Relationship: allow all
    - Salesforce Data Extension: allow all
  - Interactions:
    - Activities
      - Query: allow all
  - Shared Folders:
    - Shared Data Extension Folders: allow all
    - Shared Salesforce Data Extension Folders: allow all
Click Save

2. Assign DESelect Segment User with restrictions to Automation Studio role to users:

In Salesforce Marketing Cloud, go to: Setup > Administration > Users > Users
Check the checkbox next to the user you want to assign the DESelect role to. Then click Manage Roles
Click Edit Roles
Choose DESelect User with restrictions to Automation Studio and click Save
Repeat steps 2-5 for all DESelect users

Important Note!

While assigning the DESelect Segment User with restrictions to Automation Studio role to users, make sure they do not have permissions from other roles that overwrite the DESelect Segment User with restrictions to Automation Studio permissions. In such a case, a user with conflicting permissions might get an 'API Permission Failed' error.

Also, Giving DESelect users the required Salesforce Marketing Cloud permission article might be helpful to you.

Related articles